This patchset includes the Catalogue and respective
Replacement transformers for the Dex/API server and
kustomization of values through patches.
It also includes:
- Support for dex LDAP authentication
- Moved Dex from provide-infra to controlplane
Note:
1. This patchset also fixes the current issue with wordpress where it
was not in sync with lma for catalogue (catalogues)
2. This patchset also doesn't call function k8scontrol-oidc replacements
rather subcluster-dex.yaml is created in
manifests/type/sub-cluster/controlplane/replacements/subcluster-dex.yaml
due to current localized yamls available at same path. This is a known
issue for which another patchset has to be created.
Relates-To: #136
Co-authored-by: sa069q <296.saurabh@gmail.com>
Change-Id: I6d14f6cc976d3f8a174e2d083425a970f59dcd92
* For zuul jobs respective site_name is set from jobs.yaml,
however when running gate scripts for local deployment we are not using
jobs.yaml and so it defaults to test-site from the config created
using template from airshipctl repo.
Change-Id: I0f4b975f78db4161048eb0621a9cc25933141f63
This change fixes some configurations of LMA CRs and values,
such that logs and metrics are properly visible on kibana
and grafana after workload and workload-config phase.
Also:
- Added dashboards to grafana
- Added a container to kibana which sets up the discover page
- Added the DependsOn directive was added to the workload-lma
prometheus-elasticsearch-exporter HR
- Added NodePort bindings to LMA services in multi-tenant/lma
subcluster
Change-Id: I14338f5cab0808654173a09494f5fde540397dcc
- Update the helm-chart-collator image to one which:
- uses versions unique to the git source [0]
- includes all helm charts used by treasuremap [1]
- Rewire all the HelmReleases to point at the hcc HelmRepository
- Removes all the other HelmRepositories and associated config
[0]: https://review.opendev.org/c/airship/images/+/794657
[1]: https://review.opendev.org/c/airship/images/+/794838
Relates-To: #162
Relates-To: #164
Signed-off-by: Sean Eagan <seaneagan1@gmail.com>
Change-Id: Ia96820b627d76feee7909471dd98a27de8594bf1
This change adds version replacements for images:
- kube-state-metrics
- node-exporter
- curl
- Fixes the replacement transformer for prometheus image
- Include only logging CRs in workload-config-target
- Fixes a typo in Elasticsearch's storageClassName
Relates-To: #150
Change-Id: I0110749bb28ca486127b64b516153ce4a25226ae
This synchronizes the Metal3Cluster's controlPlane port with the
SIP controlPlane's load-balancer's port.
Closes: #181
Change-Id: Idd7219323095c03ea3376016207e1c45713ffc92
The virtual-network-cloud deployment job has been failing while not
performing any meaningful testing. This change moves the job to
experimental until we can fix it so that it does not consume nodes from
the node pool.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Ic69da703a2f72f56acfdb0d448a0d0659aa24e21
The SipCluster CRs reference an ssh-private-keys Secret
which did not exist. This is used to ssh into the VMs
from within the Sip jump hosts. This change adds the Secret
and sources its content from the ssh keys generated for the
target cluster. Once we have a pattern for generating secrets
for sub-clusters in place we should generate separate ssh
key pairs for each sub-cluster.
Signed-off-by: Sean Eagan <seaneagan1@gmail.com>
Change-Id: I7eb997e6328bba0fdc49f5b9b5a8c097fc24e143
This patchset adds the deployment of dex-aio (with HelmRelease) for
multi-tenant type during the workload-target phase.
This is required for deploying the Target cluster through multi-tenant
type.
NOTE: Not to be confused with deploying a multi-tenant/subcluster, which
is addressed by a different PS.
Change-Id: Ifc33a6f751af24bf6db3e20a87d32ee67965c2c3
- Deploy the helm-chart-collator service and HelmRepository
to sub-clusters so that HelmReleases there can use it
- Integrate flux helm composite replacements [0].
- Move lma services to sub-directory of the workload to be
able to set their namespace independent of the rest of the
workload, currently helm-chart-collator.
[0]: https://review.opendev.org/c/airship/airshipctl/+/790791
Relates-To: #162
Signed-off-by: Sean Eagan <seaneagan1@gmail.com>
Change-Id: Ib9f3add70a84ab75bfb0b1b6b7083048e469a24f
Adds labels used by ViNO & SIP to schedule subcluster VMs appropriately,
for rack and undercloud server name.
This also trues up the label definitions in the SIP CRs to match,
and configures the Metal3Cluster resource to synchronize the labels
from BMHs to Nodes.
This change updates the airshipctl pin to incorporate related functionality:
https://review.opendev.org/c/airship/airshipctl/+/797130
Change-Id: I6cf2bc653589d142736990cdfadf82641a6ca4d1
* added a bmcCredentails in the secret-template to generate the
bmc-Crdentials.
* added replacements to replace the newly generated bmcCredentails in
the Vino CR.
* fixed `invlalid array index` rendering error for multi-tenent
workload-config type.
* included missing replacements for LMA in virtual-network-site
Closes: #147
Change-Id: Id2e3049292ec421959f95ee361e72782c1bbbc57
Prior to this change, VRRP setup and Dex setup was bundled into the
same k8scontrol-ha function. However, subclusters will require
Dex *without* VRRP, so this change splits them up, into
a k8scontrol-oidc (used directly by the subcluster) and k8scontrol-ha
(which will inherit from k8scontrol-oidc).
Change-Id: Ib55871353f24be031a7bb1cc4550f0db3ad5aff2
Closes: 182
This patchset includes separation of bind_password for
target-cluster and sub-cluster.
Sub-cluster bind_password is pointed in PS: 795527
Change-Id: I1812e44faa95025acc16e9fedab2f0881c1b9fa5
Sreejith Punnapuzha
airship2ci
Zuul
Graham Steffaniak
sb048x
Sirajudeen
Steven Fitzpatrick
Sean Eagan
Ian Howell
Drew Walters
Reddy, Hemachandra (hr858f)
Shiba, Sidney
Matt McEuen
shon phand
Andrii Ostapenko
ermurugesanbe